{
 "cells": [
  {
   "cell_type": "code",
   "execution_count": 18,
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "AAAAACDmQA.=auth.a.friendsakka.xyz\n",
      "Nt6FgAABADVFNjNDNzEwNUFGMEM3MDNGQjk3NDA0NTlERkU4NkRGRENGOEM3QzM.=auth.a.friendsakka.xyz\n",
      "Nt6KKMn/AHNzaA.=connect.a.friendsakka.xyz\n",
      "Nt4AAAABBA.a.friendsakka.xyz\n",
      "Nt4AAAACCFNTSC0yLjAtT3BlblNTSF83LjJwMiBVYnVudHUtNHVidW50dTIuMg0.K.a.friendsakka.xyz\n",
      "Nt4AAAADBA.a.friendsakka.xyz\n",
      "Nt4AAAAEBA.a.friendsakka.xyz\n",
      "Nt4AAAAFBA.a.friendsakka.xyz\n",
      "Nt4AAAAGBA.a.friendsakka.xyz\n",
      "Nt4AAAAHBA.a.friendsakka.xyz\n",
      "Nt4AAAAIBA.a.friendsakka.xyz\n",
      "Nt4AAAAJBA.a.friendsakka.xyz\n",
      "Nt4AAQAKBA.a.friendsakka.xyz\n",
      "Nt4AAgALCAAABTQFFPJzTZpnI4yp1uQ385EVlpMAAADEY3VydmUyNTUxOS1zaGE.yNTZAbGlic3NoLm9yZyxlY2RoLXNoYTItbmlzdHAyNTYsZWNkaC1zaGEyLW5pc3.RwMzg0LGVjZGgtc2hhMi1uaXN0cDUyMSxkaWZmaWUtaGVs.a.friendsakka.xyz\n",
      "Nt4AAwAMBA.a.friendsakka.xyz\n",
      "Nt4ABAANCGxtYW4tZ3JvdXAtZXhjaGFuZ2Utc2hhMjU2LGRpZmZpZS1oZWxsbWF.uLWdyb3VwLWV4Y2hhbmdlLXNoYTEsZGlmZmllLWhlbGxtYW4tZ3JvdXAxNC1zaG.ExLGV4dC1pbmZvLWMAAAEiZWNkc2Etc2hhMi1uaXN0cDI1.a.friendsakka.xyz\n",
      "Nt4AAAAOBA.a.friendsakka.xyz\n",
      "Nt4AAAAPCDYtY2VydC12MDFAb3BlbnNzaC5jb20sZWNkc2Etc2hhMi1uaXN0cDM.4NC1jZXJ0LXYwMUBvcGVuc3NoLmNvbSxlY2RzYS1zaGEyLW5pc3RwNTIxLWNlcn.QtdjAxQG9wZW5zc2guY29tLGVjZHNhLXNoYTItbmlzdHAy.a.friendsakka.xyz\n",
      "Nt4AAAAQCDU2LGVjZHNhLXNoYTItbmlzdHAzODQsZWNkc2Etc2hhMi1uaXN0cDU.yMSxzc2gtZWQyNTUxOS1jZXJ0LXYwMUBvcGVuc3NoLmNvbSxzc2gtcnNhLWNlcn.QtdjAxQG9wZW5zc2guY29tLHNzaC1lZDI1NTE5LHJzYS1z.a.friendsakka.xyz\n",
      "Nt4AAAARCGhhMi01MTIscnNhLXNoYTItMjU2LHNzaC1yc2EAAACWY2hhY2hhMjA.tcG9seTEzMDVAb3BlbnNzaC5jb20sYWVzMTI4LWN0cixhZXMxOTItY3RyLGFlcz.I1Ni1jdHIsYWVzMTI4LWdjbUBvcGVuc3NoLmNvbSxhZXMy.a.friendsakka.xyz\n",
      "Nt4AAAASCDU2LWdjbUBvcGVuc3NoLmNvbSxhZXMxMjgtY2JjLGFlczE5Mi1jYmM.sYWVzMjU2LWNiYywzZGVzLWNiYwAAAJZjaGFjaGEyMC1wb2x5MTMwNUBvcGVuc3.NoLmNvbSxhZXMxMjgtY3RyLGFlczE5Mi1jdHIsYWVzMjU2.a.friendsakka.xyz\n",
      "Nt4AAAATCC1jdHIsYWVzMTI4LWdjbUBvcGVuc3NoLmNvbSxhZXMyNTYtZ2NtQG9.wZW5zc2guY29tLGFlczEyOC1jYmMsYWVzMTkyLWNiYyxhZXMyNTYtY2JjLDNkZX.MtY2JjAAAA1XVtYWMtNjQtZXRtQG9wZW5zc2guY29tLHVt.a.friendsakka.xyz\n",
      "Nt4AAAAUCGFjLTEyOC1ldG1Ab3BlbnNzaC5jb20saG1hYy1zaGEyLTI1Ni1ldG1.Ab3BlbnNzaC5jb20saG1hYy1zaGEyLTUxMi1ldG1Ab3BlbnNzaC5jb20saG1hYy.1zaGExLWV0bUBvcGVuc3NoLmNvbSx1bWFjLTY0QG9wZW5z.a.friendsakka.xyz\n",
      "Nt4AAAAVCHNoLmNvbSx1bWFjLTEyOEBvcGVuc3NoLmNvbSxobWFjLXNoYTItMjU.2LGhtYWMtc2hhMi01MTIsaG1hYy1zaGExAAAA1XVtYWMtNjQtZXRtQG9wZW5zc2.guY29tLHVtYWMtMTI4LWV0bUBvcGVuc3NoLmNvbSxobWFj.a.friendsakka.xyz\n",
      "Nt4AAAAWCC1zaGEyLTI1Ni1ldG1Ab3BlbnNzaC5jb20saG1hYy1zaGEyLTUxMi1.ldG1Ab3BlbnNzaC5jb20saG1hYy1zaGExLWV0bUBvcGVuc3NoLmNvbSx1bWFjLT.Y0QG9wZW5zc2guY29tLHVtYWMtMTI4QG9wZW5zc2guY29t.a.friendsakka.xyz\n",
      "Nt4AAAAXCCxobWFjLXNoYTItMjU2LGhtYWMtc2hhMi01MTIsaG1hYy1zaGExAAA.AGm5vbmUsemxpYkBvcGVuc3NoLmNvbSx6bGliAAAAGm5vbmUsemxpYkBvcGVuc3.NoLmNvbSx6bGliAAAAAAAAAAAAAAAAAAAAAAAA.a.friendsakka.xyz\n",
      "Nt4AAAAYCAAAACwGHgAAACBYhrvKZIgxDZCxZfc4JytgLCbkFJ57PvNWkXJBE+W.NAAAAAAAAAA.a.friendsakka.xyz\n",
      "Nt4ABQAZBA.a.friendsakka.xyz\n",
      "Nt4ABgAaBA.a.friendsakka.xyz\n",
      "Nt4ABwAbBA.a.friendsakka.xyz\n",
      "Nt4ACAAcBA.a.friendsakka.xyz\n",
      "Nt4ACQAdBA.a.friendsakka.xyz\n",
      "Nt4ACgAeBA.a.friendsakka.xyz\n",
      "Nt4AAwAMBA.a.friendsakka.xyz\n",
      "Nt4AAAAQCDU2LGVjZHNhLXNoYTItbmlzdHAzODQsZWNkc2Etc2hhMi1uaXN0cDU.yMSxzc2gtZWQyNTUxOS1jZXJ0LXYwMUBvcGVuc3NoLmNvbSxzc2gtcnNhLWNlcn.QtdjAxQG9wZW5zc2guY29tLHNzaC1lZDI1NTE5LHJzYS1z.a.friendsakka.xyz\n",
      "Nt4AAAATCC1jdHIsYWVzMTI4LWdjbUBvcGVuc3NoLmNvbSxhZXMyNTYtZ2NtQG9.wZW5zc2guY29tLGFlczEyOC1jYmMsYWVzMTkyLWNiYyxhZXMyNTYtY2JjLDNkZX.MtY2JjAAAA1XVtYWMtNjQtZXRtQG9wZW5zc2guY29tLHVt.a.friendsakka.xyz\n",
      "Nt4ACwAfBA.a.friendsakka.xyz\n",
      "Nt4ADAAgCAAAAAwKFQAAAAAAAAAAAACHOf5faWbNfXU2KSz/e1BTUjl6EtntMEj.EF7TzPHgjUJQiYzsd+ESEiY8qWA.a.friendsakka.xyz\n",
      "Nt4ADQAhBA.a.friendsakka.xyz\n",
      "Nt4ADgAiBA.a.friendsakka.xyz\n",
      "Nt4ADwAjBA.a.friendsakka.xyz\n",
      "Nt4AEAAkBA.a.friendsakka.xyz\n",
      "Nt4AEQAlBA.a.friendsakka.xyz\n",
      "Nt4AEgAmBA.a.friendsakka.xyz\n",
      "Nt4AEwAnBA.a.friendsakka.xyz\n",
      "Nt4AFAAoBA.a.friendsakka.xyz\n",
      "Nt4AFQApCDDZCWhWhcguda6VB1i2waD4FQ6pTHr+Ny1cg6FLAg0B8Jnl1JoEUwf.SVNVDI1G3WNdheltQ/ee6Fts/Bw.a.friendsakka.xyz\n",
      "Nt4AFgAqBA.a.friendsakka.xyz\n",
      "Nt4AFwArBA.a.friendsakka.xyz\n",
      "Nt4AGAAsBA.a.friendsakka.xyz\n",
      "Nt4AGQAtBA.a.friendsakka.xyz\n",
      "Nt4AGgAuBA.a.friendsakka.xyz\n",
      "Nt4AGwAvBA.a.friendsakka.xyz\n",
      "Nt4AHAAwBA.a.friendsakka.xyz\n",
      "Nt4AHQAxBA.a.friendsakka.xyz\n",
      "Nt4AHgAyBA.a.friendsakka.xyz\n",
      "Nt4AHwAzBA.a.friendsakka.xyz\n",
      "Nt4AIAA0BA.a.friendsakka.xyz\n",
      "Nt4AIQA1BA.a.friendsakka.xyz\n",
      "Nt4AIgA2BA.a.friendsakka.xyz\n",
      "Nt4AIwA3BA.a.friendsakka.xyz\n",
      "Nt4AJAA4BA.a.friendsakka.xyz\n",
      "Nt4AJQA5BA.a.friendsakka.xyz\n",
      "Nt4AJgA6BA.a.friendsakka.xyz\n",
      "Nt4AJwA7BA.a.friendsakka.xyz\n",
      "Nt4AKAA8BA.a.friendsakka.xyz\n",
      "Nt4AKQA9BA.a.friendsakka.xyz\n",
      "Nt4AKgA+BA.a.friendsakka.xyz\n",
      "Nt4AKwA/BA.a.friendsakka.xyz\n",
      "Nt4ALABABA.a.friendsakka.xyz\n",
      "Nt4ALQBBBA.a.friendsakka.xyz\n",
      "Nt4ALgBCBA.a.friendsakka.xyz\n",
      "Nt4ALwBDBA.a.friendsakka.xyz\n",
      "Nt4AMABEBA.a.friendsakka.xyz\n",
      "Nt4AMQBFBA.a.friendsakka.xyz\n",
      "Nt4AMgBGBA.a.friendsakka.xyz\n",
      "Nt4AMwBHBA.a.friendsakka.xyz\n",
      "Nt4ANABIBA.a.friendsakka.xyz\n",
      "Nt4ANQBJBA.a.friendsakka.xyz\n",
      "Nt4ANgBKBA.a.friendsakka.xyz\n",
      "Nt4ANwBLBA.a.friendsakka.xyz\n",
      "Nt4AOABMBA.a.friendsakka.xyz\n",
      "Nt4AOQBNBA.a.friendsakka.xyz\n",
      "Nt4AOgBOBA.a.friendsakka.xyz\n",
      "Nt4AOwBPBA.a.friendsakka.xyz\n",
      "Nt4ANABIBA.a.friendsakka.xyz\n",
      "Nt4AOQBNBA.a.friendsakka.xyz\n",
      "Nt4AOwBPBA.a.friendsakka.xyz\n",
      "Nt4APABQBA.a.friendsakka.xyz\n",
      "Nt4APQBRBA.a.friendsakka.xyz\n",
      "Nt4APgBSBA.a.friendsakka.xyz\n",
      "Nt4APwBTBA.a.friendsakka.xyz\n",
      "Nt4AQABUBA.a.friendsakka.xyz\n",
      "Nt4AQQBVCG4jCVIrfHLZP1LFVX5O0OqzkQ04EKb+WPrVD6BTjMJi2b35ap/kMrc.ogWf/2uHQuVbU8y812WWcqC0lj73gN1leDxRwMOBxoa/K0w2G7BhqqIHij73+bU.iDsRjxJ1VQQgW6Tl54z0EJ656ShPuF1iv8Nnn6ZI/PkAB+.a.friendsakka.xyz\n",
      "Nt4AQgBWCKYhDasK6NJAuNG8J+OxQUToMGSoKnYQ8WiC.a.friendsakka.xyz\n",
      "Nt4AOQBNBA.a.friendsakka.xyz\n",
      "Nt4AQwBXBA.a.friendsakka.xyz\n",
      "Nt4ARABYCPZTlzq1II0S+3iLLsS1U4EXod4w/VQO7uxOmtFsy3l5Ac7Ybusp5TA.znCia7GQUg5nwauI+1AD3acHh2NsLpXnb3To9iKzANUkaHBt0kzugGWjcTI2ke1.DRBI/GZosSkKkW5Gx4WHOMDBBkRvwffeA.a.friendsakka.xyz\n",
      "Nt4ARQBZBA.a.friendsakka.xyz\n",
      "Nt4ARgBaBA.a.friendsakka.xyz\n",
      "Nt4ARwBbBA.a.friendsakka.xyz\n",
      "Nt4ASABcBA.a.friendsakka.xyz\n",
      "Nt4ASQBdBA.a.friendsakka.xyz\n",
      "Nt4ASgBeBA.a.friendsakka.xyz\n",
      "Nt4ASwBfBA.a.friendsakka.xyz\n",
      "Nt4ATABgBA.a.friendsakka.xyz\n",
      "Nt4ATQBhBA.a.friendsakka.xyz\n",
      "Nt4ATgBiCDepxg3K6OibK4d1/Bu07OsR4H52v3XDbDbIC4qZ1EBNWtnlybkhhyj.6UDzJbx0hXSuZJKL6Gdk5bustKdU2vS7/8uAIX/etwuG49ih4gw2JAZGMWClH5q.W9s+Egg+MyXVv4BlKbLfgpzwvZeVxDozdQnTPxVR1G5Frl.a.friendsakka.xyz\n",
      "Nt4ATwBjCLrnCgxYelVFbI371v9ZpCJGuIudCKQzUc/lpqSmcDcb7Yqsg6/H7sO.u1KWvY6iBFQRm4Xo/Ed1+qkU2JB34Vvol+MHHNmNAj5DfMr74bWnRoY6FP8qPky.AdIXoq9EHrfTjhYfj7dMT3JNyNbQXMFyj627tA0ttx9rsd.a.friendsakka.xyz\n",
      "Nt4AUABkCOAx17CYAMAtR13milEDHrdh6o91ABVv21xS41/YezbyxV2rdwrblIB.h9U57ZtPMBZ8t4BMsZVZdzam7KTYz67HDc6y7kYncHlnLiZf8VMuiSxP5G01ip9.iZHKY/IzV1OwMP/Q52qiyljUndxkCcYGRw7985lpNYdhOM.a.friendsakka.xyz\n",
      "Nt4AUQBlCHtWWKDuXpvZ40HC+djue4cLLOsPrpf78aKaUl9VdwhFnlM9nsEycyt.oVY+V+djofmSQhSk/50dNYw50Jp8lxT0SA3bo3jnMKWXRi9B36A.a.friendsakka.xyz\n",
      "Nt4AUgBmBA.a.friendsakka.xyz\n",
      "Nt4AUwBnBA.a.friendsakka.xyz\n",
      "Nt4AVABoBA.a.friendsakka.xyz\n",
      "Nt4AVQBpBA.a.friendsakka.xyz\n",
      "Nt4AVgBqBA.a.friendsakka.xyz\n",
      "Nt4AVwBrBA.a.friendsakka.xyz\n",
      "Nt4AWABsBA.a.friendsakka.xyz\n",
      "Nt4AWQBtBA.a.friendsakka.xyz\n",
      "Nt4AWgBuBA.a.friendsakka.xyz\n",
      "Nt4AWwBvBA.a.friendsakka.xyz\n",
      "Nt4AXABwBA.a.friendsakka.xyz\n",
      "Nt4AXQBxBA.a.friendsakka.xyz\n",
      "Nt4AXgByBA.a.friendsakka.xyz\n",
      "Nt4AXwBzBA.a.friendsakka.xyz\n",
      "Nt4AYAB0BA.a.friendsakka.xyz\n",
      "Nt4AYQB1BA.a.friendsakka.xyz\n",
      "Nt4AYgB2BA.a.friendsakka.xyz\n",
      "Nt4AYwB3BA.a.friendsakka.xyz\n",
      "Nt4AZAB4BA.a.friendsakka.xyz\n",
      "Nt4AXQBxBA.a.friendsakka.xyz\n",
      "Nt4AZQB5BA.a.friendsakka.xyz\n",
      "Nt4AZgB6BA.a.friendsakka.xyz\n",
      "Nt4AZwB7BA.a.friendsakka.xyz\n",
      "Nt4AaAB8BA.a.friendsakka.xyz\n",
      "Nt4AaQB9BA.a.friendsakka.xyz\n",
      "Nt4AagB+BA.a.friendsakka.xyz\n",
      "Nt4AawB/BA.a.friendsakka.xyz\n",
      "Nt4AbACABA.a.friendsakka.xyz\n",
      "Nt4AbQCBCH4u7uvXOj4Iau5VbGSUOHaIHpXyLnXOG84rKaQEc6qQGIf6hA.a.friendsakka.xyz\n",
      "Nt4AbgCCCBApUfFOWfO4z/lcLZGMTcZCab/Ubkw+qfwvEejn+BTCgELlvw.a.friendsakka.xyz\n",
      "Nt4AbwCDBA.a.friendsakka.xyz\n",
      "Nt4AcACEBA.a.friendsakka.xyz\n",
      "Nt4AcQCFCIpsazRS1+6sARvoiDrV1PJ7nUSudmygZUkQhZua6yrzGxhh5A.a.friendsakka.xyz\n",
      "Nt4AcgCGCFXnNYqkVzK8ArIODqwjjr0jPo6GgEUNTvcMLddSDgAXEj3bWw.a.friendsakka.xyz\n",
      "Nt4AcwCHBA.a.friendsakka.xyz\n",
      "Nt4AdACIBA.a.friendsakka.xyz\n",
      "Nt4AdQCJBA.a.friendsakka.xyz\n",
      "Nt4AdgCKCAzkyfNlvlPp3Ors/pp7ZKGdJ5eBNzJjzJsFBXBxQF9xyPz5pw.a.friendsakka.xyz\n",
      "Nt4AdwCLCOJwHwwBwCYIvmsMVnRGFXjSsSwnR4PwykGogX11X1rK7s1GTQ.a.friendsakka.xyz\n",
      "Nt4AeACMCPKB7EOk8o3m9AJIcpvQu6kdY+J9ONNiHI8wlLb9RHj5gL7ykw.a.friendsakka.xyz\n",
      "Nt4AeQCNCFdi2gdSNjglhy+3LXMhUGEpZx4wzc9qabHF2ul/jplX9+PL0A.a.friendsakka.xyz\n",
      "Nt4AagB+BA.a.friendsakka.xyz\n",
      "Nt4AcgCGCFXnNYqkVzK8ArIODqwjjr0jPo6GgEUNTvcMLddSDgAXEj3bWw.a.friendsakka.xyz\n",
      "Nt4AegCOCFNi2hk2JXuwKmh4KTfCcONzTwCZh0W5325xI1DhzoQRw3eGHA.a.friendsakka.xyz\n",
      "Nt4AewCPBA.a.friendsakka.xyz\n",
      "Nt4AfACQBA.a.friendsakka.xyz\n",
      "Nt4AfQCRBA.a.friendsakka.xyz\n",
      "Nt4AfgCSBA.a.friendsakka.xyz\n",
      "Nt4AfwCTBA.a.friendsakka.xyz\n",
      "Nt4AgACUBA.a.friendsakka.xyz\n",
      "Nt4AgQCVBA.a.friendsakka.xyz\n",
      "Nt4AggCWBA.a.friendsakka.xyz\n",
      "Nt4AgwCXBA.a.friendsakka.xyz\n",
      "Nt4AhACYBA.a.friendsakka.xyz\n",
      "Nt4AhQCZBA.a.friendsakka.xyz\n",
      "Nt4AhgCaBA.a.friendsakka.xyz\n",
      "Nt4AhwCbBA.a.friendsakka.xyz\n",
      "Nt4AiACcBA.a.friendsakka.xyz\n",
      "Nt4AiQCdBA.a.friendsakka.xyz\n",
      "Nt4AigCeBA.a.friendsakka.xyz\n",
      "Nt4AgwCXBA.a.friendsakka.xyz\n",
      "Nt4AiQCdBA.a.friendsakka.xyz\n",
      "Nt4AigCeBA.a.friendsakka.xyz\n",
      "Nt4AiwCfBA.a.friendsakka.xyz\n",
      "Nt4AjACgBA.a.friendsakka.xyz\n",
      "Nt4AjQChBA.a.friendsakka.xyz\n",
      "Nt4AjgCiBA.a.friendsakka.xyz\n",
      "Nt4AjwCjBA.a.friendsakka.xyz\n",
      "Nt4AkACkBA.a.friendsakka.xyz\n",
      "Nt4AkQClBA.a.friendsakka.xyz\n",
      "Nt4AkgCmBA.a.friendsakka.xyz\n",
      "Nt4AkwCnCGivEqUSEkt3IbMNwtcXflWOU9rOOj1Xd7CX4FOFuIKg900Dfw.a.friendsakka.xyz\n",
      "Nt4AlACoCKAKmUIeKzsKSfIMzZ1EWEYV6QUhGZz2BHvRUwA7FT9N39UjUg.a.friendsakka.xyz\n",
      "Nt4AlQCpBA.a.friendsakka.xyz\n",
      "Nt4AlgCqBA.a.friendsakka.xyz\n",
      "Nt4AlwCrCBPvrihHJhzwXbu1md0nIoTV73dggJkLE7KzYawJ5nmBfpmyLA.a.friendsakka.xyz\n",
      "Nt4AmACsBA.a.friendsakka.xyz\n",
      "Nt4AmQCtBA.a.friendsakka.xyz\n",
      "Nt4AmgCuBA.a.friendsakka.xyz\n",
      "Nt4AmwCvBA.a.friendsakka.xyz\n",
      "Nt4AnACwBA.a.friendsakka.xyz\n",
      "Nt4AnQCxBA.a.friendsakka.xyz\n",
      "Nt4AngCyBA.a.friendsakka.xyz\n",
      "Nt4AnwCzBA.a.friendsakka.xyz\n",
      "Nt4AoAC0CKOhZCWiIuOZciG/ls2kTD53nRblhWjNIpz5T8i5QS4zs+fq0w.a.friendsakka.xyz\n",
      "Nt4AoQC1CKbgPpBnf3alzhA2/xYFlGcvesQ/KG04l3JyUbfs+YDUyFQ1Sw.a.friendsakka.xyz\n",
      "Nt4AogC2CE4358GZ798XXx3zUujKhJwCUcKpkgey/hczg7matUX0OEMTEw.a.friendsakka.xyz\n",
      "Nt4AowC3CNKixmg5jLPH+LxKV7iyFgYz2AUWtDeQpzWTDcdpHSHJJPYiTg.a.friendsakka.xyz\n",
      "Nt4ApAC4CCbJEN5pT6JRfZ8rVhG355bhYODcNo9pl8WRjGEzfKH4GSeWhg.a.friendsakka.xyz\n",
      "Nt4ApQC5CD8AcviL2PxZsw5lj0yMUeiyAOFFNNIApH7FmvXuwQ/pemd4+w.a.friendsakka.xyz\n",
      "Nt4AlwCrCBPvrihHJhzwXbu1md0nIoTV73dggJkLE7KzYawJ5nmBfpmyLA.a.friendsakka.xyz\n",
      "Nt4ApgC6BA.a.friendsakka.xyz\n",
      "Nt4ApwC7BA.a.friendsakka.xyz\n",
      "Nt4AqAC8BA.a.friendsakka.xyz\n",
      "Nt4AqQC9BA.a.friendsakka.xyz\n",
      "Nt4AqgC+BA.a.friendsakka.xyz\n",
      "Nt4AqwC/BA.a.friendsakka.xyz\n",
      "Nt4ArADABA.a.friendsakka.xyz\n",
      "Nt4ArQDBBA.a.friendsakka.xyz\n",
      "Nt4ArgDCCJsSQtS6yM78OqPz1V98Rj4wcb7wU/bM9x5ItBO6RUjwLX9gYw.a.friendsakka.xyz\n",
      "Nt4ArwDDBA.a.friendsakka.xyz\n",
      "Nt4AsADEBA.a.friendsakka.xyz\n",
      "Nt4AsQDFBA.a.friendsakka.xyz\n",
      "Nt4AsgDGBA.a.friendsakka.xyz\n",
      "Nt4AswDHBA.a.friendsakka.xyz\n",
      "Nt4AtADIBA.a.friendsakka.xyz\n",
      "Nt4AtQDJBA.a.friendsakka.xyz\n",
      "Nt4AtgDKBA.a.friendsakka.xyz\n",
      "Nt4AtwDLCLLjGAG+IKML2Zi7PT+TFDSNhjiLmKTHZac7e56yfN7mKsxKiA.a.friendsakka.xyz\n",
      "Nt4ArwDDBA.a.friendsakka.xyz\n",
      "Nt4AuADMBA.a.friendsakka.xyz\n",
      "Nt4AuQDNBA.a.friendsakka.xyz\n",
      "Nt4AugDOBA.a.friendsakka.xyz\n",
      "Nt4AuwDPBA.a.friendsakka.xyz\n",
      "Nt4AvADQBA.a.friendsakka.xyz\n",
      "Nt4AvQDRBA.a.friendsakka.xyz\n",
      "Nt4AvgDSBA.a.friendsakka.xyz\n",
      "Nt4AvwDTBA.a.friendsakka.xyz\n",
      "Nt4AwADUBA.a.friendsakka.xyz\n",
      "Nt4AwQDVBA.a.friendsakka.xyz\n",
      "Nt4AwgDWCOgOq43J3TdL/I31YR3YMM8t++QFtZ16qQPEIirF4hRaA8FunQ.a.friendsakka.xyz\n",
      "Nt4AwwDXCLtkHZtJMUBhnNxVaFS3zhN6tFgDNu+n5tM5g1eIuZn+fhU7wg.a.friendsakka.xyz\n",
      "Nt4AxADYCEOLm0PEha+0wID8pwn/K3maWoWIIIUkxV6gNK23ggfPaT74yg.a.friendsakka.xyz\n",
      "Nt4AugDOBA.a.friendsakka.xyz\n",
      "Nt4AxQDZBA.a.friendsakka.xyz\n",
      "Nt4AxgDaBA.a.friendsakka.xyz\n",
      "Nt4AxwDbBA.a.friendsakka.xyz\n",
      "Nt4AyADcBA.a.friendsakka.xyz\n",
      "Nt4AyQDdBA.a.friendsakka.xyz\n",
      "Nt4AygDeBA.a.friendsakka.xyz\n",
      "Nt4AywDfBA.a.friendsakka.xyz\n",
      "Nt4AzADgBA.a.friendsakka.xyz\n",
      "Nt4AzQDhBA.a.friendsakka.xyz\n",
      "Nt4AzgDiCEWG1+hIMG1IBGM3JiH/1JU+Ck3cNjy7JJmNWbORhWyZfiIsiw.a.friendsakka.xyz\n",
      "Nt4AxgDaBA.a.friendsakka.xyz\n",
      "Nt4AyADcBA.a.friendsakka.xyz\n",
      "Nt4AyQDdBA.a.friendsakka.xyz\n",
      "Nt4AzwDjCHtjc+umfe+5oRMrC75FsPM9DYFPiUmN66p3uAwkb1XgPyGIdA.a.friendsakka.xyz\n",
      "Nt4A0ADkBA.a.friendsakka.xyz\n",
      "Nt4A0QDlBA.a.friendsakka.xyz\n",
      "Nt4A0gDmBA.a.friendsakka.xyz\n",
      "Nt4A0wDnBA.a.friendsakka.xyz\n",
      "Nt4A1ADoBA.a.friendsakka.xyz\n",
      "Nt4A1QDpBA.a.friendsakka.xyz\n",
      "Nt4A1gDqBA.a.friendsakka.xyz\n",
      "Nt4A1wDrBA.a.friendsakka.xyz\n",
      "Nt4A2ADsCA2nprpJdjfaqq7KgwEfVqejBiCi8txgBPgeZJ5p6iOwYdez1g.a.friendsakka.xyz\n",
      "Nt4A2QDtCEnBpYGmO03DUkkfLGRwTrvL3Wr0wTZwQD6fxD+2xjetQ5hF6w.a.friendsakka.xyz\n",
      "Nt4A2gDuCAu1BPhfrBE7g0avbVZelwp8aTGIr590stq60Iz7k3lDcoxnjQ.a.friendsakka.xyz\n",
      "Nt4A2wDvCGAeZXmqrIIBIyUNYw6a4GSIongiTPDh62I1iYMP7CIAp+JFmA.a.friendsakka.xyz\n",
      "Nt4A3ADwCGdzKfKwAiRYuGhxt4PzF97MU8EcXr27qf+PUyeie7qwMMEJng.a.friendsakka.xyz\n",
      "Nt4A3QDxCOZzVI+vKucwZydc7stqOZwekLw6PShyWQQxAYhU8lgez3xu0A.a.friendsakka.xyz\n",
      "Nt4A0ADkBA.a.friendsakka.xyz\n",
      "Nt4A1QDpBA.a.friendsakka.xyz\n",
      "Nt4A3gDyBA.a.friendsakka.xyz\n",
      "Nt4A3wDzBA.a.friendsakka.xyz\n",
      "Nt4A4AD0BA.a.friendsakka.xyz\n",
      "Nt4A4QD1BA.a.friendsakka.xyz\n",
      "Nt4A4gD2BA.a.friendsakka.xyz\n",
      "Nt4A4wD3BA.a.friendsakka.xyz\n",
      "Nt4A5AD4BA.a.friendsakka.xyz\n",
      "Nt4A5QD5BA.a.friendsakka.xyz\n",
      "Nt4A5gD6CDq7eEPhg+o4OG1U++rhY2SAK+Ff3ZfifdjH+aENiYpdDVN2rw.a.friendsakka.xyz\n",
      "Nt4A5wD7BA.a.friendsakka.xyz\n",
      "Nt4A6AD8BA.a.friendsakka.xyz\n",
      "Nt4A6QD9BA.a.friendsakka.xyz\n",
      "Nt4A4QD1BA.a.friendsakka.xyz\n",
      "Nt4A6gD+BA.a.friendsakka.xyz\n",
      "Nt4A6wD/BA.a.friendsakka.xyz\n",
      "Nt4A7AEABA.a.friendsakka.xyz\n",
      "Nt4A7QEBBA.a.friendsakka.xyz\n",
      "Nt4A7gECBA.a.friendsakka.xyz\n",
      "Nt4A7wEDBA.a.friendsakka.xyz\n",
      "Nt4A8AEEBA.a.friendsakka.xyz\n",
      "Nt4A8QEFBA.a.friendsakka.xyz\n",
      "Nt4A8gEGBA.a.friendsakka.xyz\n",
      "Nt4A8wEHBA.a.friendsakka.xyz\n",
      "Nt4A9AEIBA.a.friendsakka.xyz\n",
      "Nt4A9QEJBA.a.friendsakka.xyz\n",
      "Nt4A9gEKBA.a.friendsakka.xyz\n",
      "Nt4A7wEDBA.a.friendsakka.xyz\n",
      "Nt4A9wELBA.a.friendsakka.xyz\n",
      "Nt4A+AEMBA.a.friendsakka.xyz\n",
      "Nt4A+QENBA.a.friendsakka.xyz\n",
      "Nt4A+gEOBA.a.friendsakka.xyz\n",
      "Nt4A+wEPBA.a.friendsakka.xyz\n",
      "Nt4A/AEQBA.a.friendsakka.xyz\n",
      "Nt4A/QERBA.a.friendsakka.xyz\n",
      "Nt4A/gESBA.a.friendsakka.xyz\n",
      "Nt4A/wETBA.a.friendsakka.xyz\n",
      "Nt4BAAEUBA.a.friendsakka.xyz\n",
      "Nt4BAQEVCEQv5h2HTrITnqDOT8GyHpn+lmhDZzxMUyeyPIuHy1aU4jP9Cg.a.friendsakka.xyz\n",
      "Nt4BAgEWBA.a.friendsakka.xyz\n",
      "Nt4BAwEXCGKv8NWmGqqIUcopEF/XPSnrqb6D9Pty/iwaUkfaOOrxtM2s1w.a.friendsakka.xyz\n",
      "Nt4BBAEYBA.a.friendsakka.xyz\n",
      "Nt4BBQEZBA.a.friendsakka.xyz\n",
      "Nt4BBgEaBA.a.friendsakka.xyz\n",
      "Nt4BBwEbBA.a.friendsakka.xyz\n",
      "Nt4BCAEcBA.a.friendsakka.xyz\n",
      "Nt4BCQEdBA.a.friendsakka.xyz\n",
      "Nt4BCgEeBA.a.friendsakka.xyz\n",
      "Nt4BCwEfCJS64Uc+j3MjtFA3yitvSfkqBbwItK62STEjpeVll43rY0tdag.a.friendsakka.xyz\n",
      "Nt4BDAEgBA.a.friendsakka.xyz\n",
      "Nt4BDQEhCJSlo3TZGyRrJ2iKUtWZ1KlStAnp0rXFKQizTcntsDdNLxSoaA.a.friendsakka.xyz\n",
      "Nt4BDgEiBA.a.friendsakka.xyz\n",
      "Nt4BDwEjCAd7bwV7DavExVvPVPv+TTyUUuo9/L9fFlBKsE8ytSkNucCQ0g.a.friendsakka.xyz\n",
      "Nt4BEAEkBA.a.friendsakka.xyz\n",
      "Nt4BEQElBA.a.friendsakka.xyz\n",
      "Nt4BEgEmBA.a.friendsakka.xyz\n",
      "Nt4BEwEnBA.a.friendsakka.xyz\n",
      "Nt4BFAEoBA.a.friendsakka.xyz\n",
      "Nt4BFQEpBA.a.friendsakka.xyz\n",
      "Nt4BFgEqCGUZP6nAndJm4TwPeD1ylnZjZqaryfwsW8sMhKyU2mBoJSWMrQ.a.friendsakka.xyz\n",
      "Nt4BFwErBA.a.friendsakka.xyz\n",
      "Nt4BGAEsCIy40/qw4kPsj8p4EKs/v9qqxHlJop/C7OcgNJ+HEYzELIrtyA.a.friendsakka.xyz\n",
      "Nt4BGQEtBA.a.friendsakka.xyz\n",
      "Nt4BGgEuBA.a.friendsakka.xyz\n",
      "Nt4BGwEvBA.a.friendsakka.xyz\n",
      "Nt4BHAEwBA.a.friendsakka.xyz\n",
      "Nt4BHQExBA.a.friendsakka.xyz\n",
      "Nt4BHgEyBA.a.friendsakka.xyz\n",
      "Nt4BHwEzBA.a.friendsakka.xyz\n",
      "Nt4BIAE0BA.a.friendsakka.xyz\n",
      "Nt4BIQE1CFDooWuc0lS1znzwXC4hTD6rGOOrPyzxmuKfz8euJG2n4f/NbQ.a.friendsakka.xyz\n",
      "Nt4BIgE2BA.a.friendsakka.xyz\n",
      "Nt4BIwE3CMYlI7ja9XBAPAuqaClDH0sAZ47DcYRzRs5wZyn3fm951ym3CA.a.friendsakka.xyz\n",
      "Nt4BJAE4CHYPhDrgudSagbwmiHzUvj9Peg+Dmyz7F3ZLG2tEHtAtZxkbKQ.a.friendsakka.xyz\n",
      "Nt4BJQE5BA.a.friendsakka.xyz\n",
      "Nt4BJgE6CEWk6gz79lkHA+KXFK1JK3xw+LBYogtZc4yYpq7Xy5EMHM8liA.a.friendsakka.xyz\n",
      "Nt4BJwE7BA.a.friendsakka.xyz\n",
      "Nt4BKAE8BA.a.friendsakka.xyz\n",
      "Nt4BKQE9BA.a.friendsakka.xyz\n",
      "Nt4BHgEyBA.a.friendsakka.xyz\n",
      "Nt4BKgE+BA.a.friendsakka.xyz\n",
      "Nt4BKwE/BA.a.friendsakka.xyz\n",
      "Nt4BLAFABA.a.friendsakka.xyz\n",
      "Nt4BLQFBBA.a.friendsakka.xyz\n",
      "Nt4BLgFCBA.a.friendsakka.xyz\n",
      "Nt4BLwFDBA.a.friendsakka.xyz\n",
      "Nt4BMAFEBA.a.friendsakka.xyz\n",
      "Nt4BMQFFBA.a.friendsakka.xyz\n",
      "Nt4BMgFGBA.a.friendsakka.xyz\n",
      "Nt4BMwFHBA.a.friendsakka.xyz\n",
      "Nt4BNAFIBA.a.friendsakka.xyz\n",
      "Nt4BNQFJBA.a.friendsakka.xyz\n",
      "Nt4BNgFKBA.a.friendsakka.xyz\n",
      "Nt4BNwFLBA.a.friendsakka.xyz\n",
      "Nt4BMAFEBA.a.friendsakka.xyz\n",
      "Nt4BOAFMCFUIJvIaU/kfuzqjrsijooNod/3Eau8b9x7VufQ+qTGVj60fsQ.a.friendsakka.xyz\n",
      "Nt4BOQFNBA.a.friendsakka.xyz\n",
      "Nt4BOgFOBA.a.friendsakka.xyz\n",
      "Nt4BOwFPBA.a.friendsakka.xyz\n",
      "Nt4BPAFQBA.a.friendsakka.xyz\n",
      "Nt4BPQFRBA.a.friendsakka.xyz\n",
      "Nt4BPgFSBA.a.friendsakka.xyz\n",
      "Nt4BPwFTBA.a.friendsakka.xyz\n",
      "Nt4BQAFUBA.a.friendsakka.xyz\n",
      "Nt4BQQFVCEfI2hCn+j7ZyHUUQAhzE2LqKq9K0L732Pn/AcOBQ4ngQ1aDJA.a.friendsakka.xyz\n",
      "Nt4BQgFWCIMJ3lH23tJ/syRRULLLCCS/bVTus+pbC586zGahKKtLHvE5xQ.a.friendsakka.xyz\n",
      "Nt4BQwFXBA.a.friendsakka.xyz\n",
      "Nt4BRAFYCHHeL4VILNm17fmjKSNaFBAOlPCZMPSwBMK8UIgi0gMoTV0mjA.a.friendsakka.xyz\n",
      "Nt4BRQFZBA.a.friendsakka.xyz\n",
      "Nt4BRgFaBA.a.friendsakka.xyz\n",
      "Nt4BRwFbBA.a.friendsakka.xyz\n",
      "Nt4BSAFcBA.a.friendsakka.xyz\n",
      "Nt4BSQFdBA.a.friendsakka.xyz\n",
      "Nt4BSgFeBA.a.friendsakka.xyz\n",
      "Nt4BSwFfBA.a.friendsakka.xyz\n",
      "Nt4BTAFgCNZ5mUMVQNlmLxsWtJ73TQ9MLUjt7Xaqbz5/2HVigMjVlttayA.a.friendsakka.xyz\n",
      "Nt4BTQFhCCD/ZEE7+8YymTewQIosTWfqOyfyW/xK5FPsDXvAqkL0ncgaJg.a.friendsakka.xyz\n",
      "Nt4BTgFiCCib/eE0CEKJROd1qhvYwheD33sRyqJgLAnr+UxRESUL4wkEXw.a.friendsakka.xyz\n",
      "Nt4BTwFjCOwlj7y0VbNNkWvGhBDCuMQUh0HJkaFJSQpT+MZ1qR45f4ZuaA.a.friendsakka.xyz\n",
      "Nt4BUAFkCBbOjo/uCqhRkXRJajwVeov62zJVEZwQaxYp45hXFe+JbJhalQ.a.friendsakka.xyz\n",
      "Nt4BQgFWCIMJ3lH23tJ/syRRULLLCCS/bVTus+pbC586zGahKKtLHvE5xQ.a.friendsakka.xyz\n",
      "Nt4BTAFgCNZ5mUMVQNlmLxsWtJ73TQ9MLUjt7Xaqbz5/2HVigMjVlttayA.a.friendsakka.xyz\n",
      "Nt4BUQFlCNdl7yuIR+BRUcW8wbO7XgUKG3+iwLxl5fQRLb5EditPROPibQ.a.friendsakka.xyz\n",
      "Nt4BUgFmBA.a.friendsakka.xyz\n",
      "Nt4BUwFnBA.a.friendsakka.xyz\n",
      "Nt4BVAFoBA.a.friendsakka.xyz\n",
      "Nt4BVQFpBA.a.friendsakka.xyz\n",
      "Nt4BVgFqBA.a.friendsakka.xyz\n",
      "Nt4BVwFrBA.a.friendsakka.xyz\n",
      "Nt4BWAFsBA.a.friendsakka.xyz\n",
      "Nt4BWQFtBA.a.friendsakka.xyz\n",
      "Nt4BWgFuCADJComNVqWGgrZWmXoyqgRLndaXlaUYo8r4ZCbIoG4Bnn468Q.a.friendsakka.xyz\n",
      "Nt4BWwFvCPOtZw4T//AmxEm3TJZBTbML3GGtDODLex9kzjfjZyXiPnaJNw.a.friendsakka.xyz\n",
      "Nt4BXAFwBA.a.friendsakka.xyz\n",
      "Nt4BXQFxCHU3QLLvq2eWhw42cPTc5OLXfB6iqOsqK29H6riJoa9qseu3bQ.a.friendsakka.xyz\n",
      "Nt4BXgFyBA.a.friendsakka.xyz\n",
      "Nt4BXwFzBA.a.friendsakka.xyz\n",
      "Nt4BYAF0BA.a.friendsakka.xyz\n",
      "Nt4BYQF1BA.a.friendsakka.xyz\n",
      "Nt4BYgF2BA.a.friendsakka.xyz\n",
      "Nt4BYwF3BA.a.friendsakka.xyz\n",
      "Nt4BZAF4CE3hktIjWmg1gEFsvLCRESMiSkMoIHdKW9H1u48BYrGyUWO7lQ.a.friendsakka.xyz\n",
      "Nt4BZQF5CAIICJH8K7thUiIRS32QOcm2+TN2PdHt0mNBLXgz6TzKK7jXZQ.a.friendsakka.xyz\n",
      "Nt4BZgF6CEKahG1ZC9P8GB1r8amoxm1L8rWOIqPQcqw9wKJtocCh8KAqzQ.a.friendsakka.xyz\n",
      "Nt4BZwF7CIdmSBM/CskJu6tPwaF30Ka2a5O63O6zLQpRkzcG7SnHQ1twSA.a.friendsakka.xyz\n",
      "Nt4BWQFtBA.a.friendsakka.xyz\n",
      "Nt4BaAF8CFWaWD+lThSrLHrZ6LsNoOC8SkpK+jucuKTZesgpWX1e0DOdYg.a.friendsakka.xyz\n",
      "Nt4BaQF9BA.a.friendsakka.xyz\n",
      "Nt4BagF+BA.a.friendsakka.xyz\n"
     ]
    }
   ],
   "source": [
    "import tldextract\n",
    "SRC_IP_IDX = 3-1               \n",
    "DST_IP_IDX = 4-1               \n",
    "SRC_PORT_IDX = 5-1             \n",
    "DST_PORT_IDX = 6-1             \n",
    "PROTOCOL_IDX = 7-1             \n",
    "DNS_QUERY_NAME_IDX = 55-1 # domain\n",
    "DNS_REQUEST_TYPE = 56-1\n",
    "DNS_DOMAIN_TTL = 59-1\n",
    "DNS_REPLY_IPV4IP = 60-1        \n",
    "DNS_REPLY_IPV6IP = 61-1        \n",
    "DNS_REPLY_RRTYPE = 62-1        \n",
    "DNS_REQUEST_LEN  = 88-1        \n",
    "DNS_REPLY_LENGTH = 90-1        \n",
    "def extract_domain(domain):\n",
    "    suffix = {'.com','.la','.io', '.co', '.cn','.info', '.net', '.org','.me', '.mobi', '.us', '.biz', '.xxx', '.ca', '.co.jp', '.com.cn', '.net.cn', '.org.cn', '.mx','.tv', '.ws', '.ag', '.com.ag', '.net.ag', '.org.ag','.am','.asia', '.at', '.be', '.com.br', '.net.br', '.name', '.live', '.news', '.bz', '.tech', '.pub', '.wang', '.space', '.top', '.xin', '.social', '.date', '.site', '.red', '.studio', '.link', '.online', '.help', '.kr', '.club', '.com.bz', '.net.bz', '.cc', '.band', '.market', '.com.co', '.net.co', '.nom.co', '.lawyer', '.de', '.es', '.com.es', '.nom.es', '.org.es', '.eu', '.wiki', '.design', '.software', '.fm', '.fr', '.gs', '.in', '.co.in', '.firm.in', '.gen.in', '.ind.in', '.net.in', '.org.in', '.it', '.jobs', '.jp', '.ms', '.com.mx', '.nl','.nu','.co.nz','.net.nz', '.org.nz', '.se', '.tc', '.tk', '.tw', '.com.tw', '.idv.tw', '.org.tw', '.hk', '.co.uk', '.me.uk', '.org.uk', '.vg'}\n",
    "\n",
    "    domain = domain.lower()\n",
    "    names = domain.split(\".\")\n",
    "    #rint(\".\"+\".\".join(names[-2:]))\n",
    "    if len(names) >= 3:\n",
    "        if (\".\"+\".\".join(names[-2:])) in suffix:\n",
    "            print(names)\n",
    "            return \".\".join(names[-3:]), \".\".join(names[:-3])\n",
    "        elif (\".\"+names[-1]) in suffix:\n",
    "            return \".\".join(names[-2:]), \".\".join(names[:-2])\n",
    "    #print (\"New domain suffix found. Use tld extract domain...\")\n",
    "\n",
    "    pos = domain.rfind(\"/\")\n",
    "    if pos >= 0: # maybe subdomain contains /, for dns tunnel tool\n",
    "        ext = tldextract.extract(domain[pos+1:])\n",
    "        subdomain = domain[:pos+1] + ext.subdomain\n",
    "    else:\n",
    "        ext = tldextract.extract(domain)\n",
    "        subdomain = ext.subdomain\n",
    "    if ext.suffix:\n",
    "        mdomain = ext.domain + \".\" + ext.suffix\n",
    "    else:\n",
    "        mdomain = ext.domain\n",
    "    return mdomain, subdomain\n",
    "\n",
    "\n",
    "def filter_metadata_dns(data):\n",
    "    if(len(data) < 91):\n",
    "        return False\n",
    "\n",
    "    protol  = data[PROTOCOL_IDX]\n",
    "    dstport = data[DST_PORT_IDX]\n",
    "    dstip   = data[DST_IP_IDX]\n",
    "    qname   = data[DNS_QUERY_NAME_IDX]\n",
    "\n",
    "    if '' == qname or '' == dstip:\n",
    "        return False\n",
    "    if '17' == protol and ('53' == dstport):\n",
    "        return True\n",
    "    return False\n",
    "\n",
    "\n",
    "def metadata2_domain_data(log): \n",
    "    data = log.split('^')\n",
    "    #print(data)\n",
    "    if not filter_metadata_dns(data):\n",
    "        return None, None\n",
    "    domain = data[DNS_QUERY_NAME_IDX]\n",
    "    print(domain)\n",
    "    mdomain, subdomain = extract_domain(domain)\n",
    "    return (mdomain, subdomain)\n",
    "with open('./sample_data/labeled_black/dns2tcp_cmd.pcap.txt') as f:\n",
    "    for line in f:\n",
    "        mdomain, subdomain = metadata2_domain_data(line)\n",
    "        #print(mdomain,subdomain)"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": null,
   "metadata": {},
   "outputs": [],
   "source": []
  }
 ],
 "metadata": {
  "kernelspec": {
   "display_name": "Python 3",
   "language": "python",
   "name": "python3"
  },
  "language_info": {
   "codemirror_mode": {
    "name": "ipython",
    "version": 3
   },
   "file_extension": ".py",
   "mimetype": "text/x-python",
   "name": "python",
   "nbconvert_exporter": "python",
   "pygments_lexer": "ipython3",
   "version": "3.6.5"
  }
 },
 "nbformat": 4,
 "nbformat_minor": 2
}
